Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft
File:                     8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft (raw, json)
Hash identifier:          LRyCE6eiLoTppS5K0diPn/RaaFGkZ2N0STO9yPPhW0s=
Subject key identifier:   61:28:39:F7:7A:6E:F0:D1:2E:B1:87:B0:6B:7E:E9:56:F5:09:08:E3
Authority key identifier: F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67
Certificate issuer:       /CN=A912FBD5/serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167
Certificate serial:       0657
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft
Manifest number:          0652
Signing time:             Mon 30 Jun 2025 22:54:15 +0000
Manifest this update:     Mon 30 Jun 2025 22:54:15 +0000
Manifest next update:     Mon 07 Jul 2025 22:54:15 +0000
Files and hashes:         1: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl (hash: 9q1U98uclgl+EIxsBCiF4hdOGrbXu/4w/Ha22ejfNg4=)
                          2: C0D6C00E8E5511EBA9EA9977C4F9AE02.roa (hash: eq7ObcirvoR6TZzb3RsSpe6IDa+SDjtPX6j3VgoghJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl
                          rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 22:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1623 (0x657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBD5, serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167
        Validity
            Not Before: Jun 30 22:54:15 2025 GMT
            Not After : Jul  7 22:54:15 2025 GMT
        Subject: CN=68631597-0b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:9a:ca:c3:1b:69:8e:be:c3:52:19:8f:15:
                    c6:f0:a4:67:2d:87:97:ff:e5:ea:05:df:e8:ef:ad:
                    84:3b:f6:39:77:f6:31:dd:db:9b:6f:19:67:fd:89:
                    4f:02:69:dd:f2:26:c0:f0:c2:e4:80:b7:c9:2f:93:
                    9e:94:80:33:31:bb:9d:04:27:3c:0d:27:e3:a4:e7:
                    12:0b:92:ed:ba:11:f8:ab:c9:71:84:78:96:d4:80:
                    ec:06:d8:4a:d4:9f:9c:80:74:ee:c7:4a:0a:d1:c2:
                    77:17:cb:1b:ee:93:ff:a2:f4:24:fb:17:8f:09:f7:
                    38:82:ba:e6:84:97:26:09:15:c4:91:b5:52:e5:2f:
                    85:f3:14:8e:69:a3:fb:f3:d8:81:29:9d:ee:e7:f0:
                    92:5c:b4:7e:df:44:17:ff:c7:9d:09:df:9f:b4:9e:
                    0e:52:16:7e:ef:f2:56:a4:84:39:4d:12:94:0a:bb:
                    d9:b6:8d:09:1a:c4:2a:95:1a:ec:cc:7f:46:c3:36:
                    af:18:3a:20:9c:82:e6:15:54:38:cc:d9:b0:c0:ef:
                    9c:71:ad:a0:11:4a:63:35:dc:1a:8a:1c:aa:46:65:
                    a6:bf:d4:5a:37:cb:07:88:75:0e:01:f0:08:f4:29:
                    94:ad:ba:19:fa:a7:c0:53:b3:43:75:0d:50:29:5f:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:28:39:F7:7A:6E:F0:D1:2E:B1:87:B0:6B:7E:E9:56:F5:09:08:E3
            X509v3 Authority Key Identifier:
                keyid:F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d0:e1:0f:c1:43:a0:df:7f:06:a8:46:e1:06:6c:b2:ef:53:
         ab:58:b9:bb:ca:0d:65:41:b8:d5:cc:53:0f:c5:67:d9:63:ca:
         00:78:69:09:ea:84:3a:64:45:14:3c:0c:2c:5b:47:07:fc:8c:
         72:bb:00:99:60:65:55:4b:eb:f6:ad:37:eb:e0:eb:5b:56:01:
         0c:15:43:61:2a:05:3e:49:8d:4e:43:64:d1:3b:b1:55:f1:2b:
         57:5a:76:87:9c:e6:c8:8e:b7:a4:c0:42:0f:5f:7d:c7:66:db:
         51:91:3d:c6:c5:eb:9e:73:1c:c3:4b:28:0c:c3:ef:88:ef:4c:
         05:85:30:90:b0:3d:14:75:e7:05:d6:8d:96:c5:62:69:45:78:
         00:a2:55:1b:42:60:70:aa:98:00:b0:a4:50:de:ee:ea:3c:6c:
         b4:ae:6d:a6:69:39:a6:d0:2f:69:6b:9c:1b:74:3b:37:c2:c8:
         07:f8:e8:b3:96:e3:dc:2d:c8:93:0d:e3:35:ff:30:eb:9a:ee:
         90:00:e7:a1:85:5e:92:5a:f5:c8:b9:de:c0:57:d5:6a:83:b7:
         15:9f:50:31:42:82:2f:91:7d:c7:7d:52:56:f3:c1:b0:89:9a:
         24:b3:ba:3c:ef:1e:de:d3:25:54:00:be:f0:ed:0a:5a:df:17:
         39:ae:54:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:50:58 2025 by rpki-client